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1. A method for data transmission comprising the following 
steps : 

- input first data from a stochastic process (114) into 
at least first and second users (102, 104; 402, 404; 
502, 504, 506, 508, 510, 512, 516) of a communication 
network (100, 106; 400, 406; 500, 514, 518), 

- in each of the at least first and second users: 
generate a symmetrical key (SI, S2) based on the first 
data and store the symmetrical key for the purpose of 
an encrypted data transmission between the at least 
first and second users. 

characterized in that 

each of the at least first and second users has means 
(108; 408) for at least a first and a second encryption 
method for key generation, with first and second 
symmetrical keys, respectively, being generated based 
on the first data, and a changeover between the first 
and second encryption methods being made in 
chronological sequence for the encrypted data 
transmission. 

2. The method as claimed in claim 1, wherein in order to 
generate the first and second keys in each of the at least 
first and second users, different first data is formed by 
different combinatorial operations on the stochastic data. 

3. The method as claimed in claim 1 or 2 , wherein the first 
data is transmitted over the communication network (100, 106; 
400, 406; 500, 514, 518) 
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4. The method as claimed in one of the preceding claims, 
wherein the first data is obtained by acquisition of at least 
one measured value from the stochastic process (114) . 

5. The method as claimed in one of the preceding claims, 
wherein the stochastic process is a time-variable parameter of 
an automation system (500) . 

6. The method as claimed in one of the preceding claims, 
wherein the first data is obtained from least significant bit 
(LSB) positions of one or more measured values. 

7. The method as claimed in one of the preceding claims, 
wherein each of the at least first and second users acquires 
stochastic data from which the first data is formed. 

8. The method as claimed in claim 7, wherein the first data is 
formed from the stochastic data by means of a predefined 
combinatorial mechanism. 

9. The method as claimed in claim 7 or 8 , wherein the 
stochastic data is transmitted over the communication network 
(100, 106; 400, 406; 500, 514, 518). 

10. The method as claimed in one of the preceding claims, 
wherein the symmetrical key is generated in the users at the 
request of a master user of the communication network. 

11. The method as claimed in one of the preceding claims, 
wherein the symmetrical key is generated in the at least first 
and second users at predetermined times or after predetermined 
time intervals . 
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12. The method as claimed in one of the preceding claims, 
wherein the first data or the stochastic data is transmitted 
at a time of low utilization of the communication network. 

13. The method as claimed in one of the preceding claims, 
wherein the first data or the stochastic data is transmitted 
using an asymmetrical encryption method. 

14. A computer program product, in particular a digital memory 
medium, having program means for performing the following 
steps : 

- input first data from a stochastic process (114) into 
at least first and second users (102, 104; 402, 404; 
502, 504, 506, 508, 510, 512, 516) of a communication 
network (100, 106; 400, 406; 500, 514, 518), 

- in each of the at least first and second users: 
generate a symmetrical key (SI, S2) based on the first 
data and store the symmetrical key for the purpose of 
an encrypted data transmission between the at least 
first and second users, 

characterized in that 

each of the at least first and second users has means 
(108; 408) for at least a first and a second encryption 
method for key generation, with first and second 
symmetrical keys, respectively, being generated based 
on the first data, and a changeover between the first 
and second encryption methods being made in 
chronological sequence for the encrypted data 
transmission. 
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15. The computer program product as claimed in claim 14, 
wherein the first data is obtained by acquisition of a 
measured value from the stochastic process (114) . 

16. The computer program product as claimed in claim 14 or 15, 
wherein the first data is obtained from least significant bit 
(LSB) positions of one or more measured values. 

17. A communication system having at least first and second 
users (102, 104; 402, 404; 502, 504, 506, 508, 510, 512, 516) 
and a communication network (100, 106; 400, 406; 500, 514, 
518) for the purpose of a data transmission between the at 
least first and second users, and having: 

- means (112) for inputting first data from a stochastic 

process (114) into the at least first and second users, 

- in each of the at least first and second users: means 

(108; 408) for generating a symmetrical key based on 
the first data and means (110; 42 6; 52 0, 522) for 
storing the symmetrical key for the purpose of an 
encrypted data transmission between the at least first 
and second users, 
characterized in that 

each of the at least first and second users has means 
(108; 408) for at least a first and a second encryption 
method for key generation, with first and second 
symmetrical keys, respectively, being generated based 
on the first data, and a changeover between the first 
and second encryption methods being made in 
chronological sequence for the encrypted data 
transmission. 
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18. The communication system as claimed in claim 17, wherein 
the communication network (100, 106; 400, 406; 500, 514, 518) 
is a public network. 

19. The communication system as claimed in claim 17 or 18, 
wherein the communication network (100, 106; 400, 406; 500, 
514, 518) is the internet and one user is embodied as a master 
user in order to initiate a key generation in the other users 
by transmission of a corresponding request via the internet. 

20. The communication system as claimed in claim 17 or 18, 
wherein the communication network (100, 106; 400, 406; 500, 
514, 518) is an Ethernet. 

21. The communication system as claimed in claim 20, wherein 
one of the users is embodied as a master user in order to 
output a command onto the Ethernet for the purpose of 
triggering the key generation in the users. 

22. The communication system as claimed in one of the 
preceding claims 17 to 21, wherein the at least first and 
second users are components of an automation system (500) . 

23. The communication system as claimed in one of the 
preceding claims 18 to 22, wherein at least one of the users 
(516) is embodied for carrying out remote maintenance. 
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